Dump Packet across operating systems
Windows (Windows 7/10/11, Windows Server)
Download Windows x64 Installer or PortableApps version from Wireshark's official website.
Run Wireshark and select main Interface (typically Ethernet) to start packet capture.
Stop capture immediately when anomaly is detected.
Save and provide capture file to technical staff for investigation.
Linux (Debian, Ubuntu)
Install tcpdump using apt package manager:
apt install tcpdump
Identify main Interface using
ip addr(e.g.,eth0)
Start capture:
tcpdump -i <Interface> -s 65535 -w output.pcap
Press Ctrl + C to stop when anomaly occurs, provide output.pcap file with timestamp.
Last updated